Lucene search
+L

85 matches found

VulnCheck KEV
VulnCheck KEV
added 2021/04/29 12:00 a.m.7 views

VulnCheck KEV: CVE-2021-28799

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device...

10CVSS7.5AI score0.7825EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/26 12:00 a.m.71 views

Qnap Systems QNAP HBS 3 Authorization Issues Vulnerability

Qnap Systems QNAP HBS 3 is an application from China Weilian Qnap Systems. A comprehensive data backup and disaster recovery solution. An authorization issue vulnerability exists in HBS 3 Hybrid Backup Sync that stems from a failure to perform adequate authorization checks. An attacker could use...

10CVSS6.7AI score0.7825EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/23 12:00 a.m.12 views

QNAP Systems HBS 3 安全漏洞

Qnap Systems QNAP HBS 3 is an application from China Weilian Qnap Systems. A comprehensive data backup and disaster recovery solution. An authorization issue vulnerability exists in HBS 3 Hybrid Backup Sync that stems from a failure to perform adequate authorization checks. An attacker could use...

10CVSS5.7AI score0.7825EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/04/22 12:00 a.m.81 views

CVE-2021-28799

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

10CVSS9.3AI score0.7825EPSS
SaveIn wildExploits0References2
Hacker One
Hacker One
added 2021/02/17 10:18 p.m.90 views

GitHub Security Lab: [JavaScript]: add query for Express-HBS LFR

This bug was reported directly to GitHub Security Lab...

0.6AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.39 views

Joomla Component com_hbssearch 1.0 - Blind SQL Injection Vuln

No description provided by source. Joomla Component comhbssearchrtype Blind SQL-injection Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! authorJoomla HBS/author !...

7.1AI score
SaveExploits0
CVE
CVE
added 2012/09/08 10:00 a.m.58 views

CVE-2012-0254

CVE-2012-0254 denotes a stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control, affecting Honeywell HPS Experion (R2xx, R30x, R31x, R400.x); HBS Enterprise Building Manager (R400, R410.1); and ECC SymmetrE (R410.1). The vulnerability can allow remote attackers to execut...

7.5CVSS8.3AI score0.04083EPSS
SaveExploits0References2Affected Software3
zdt
zdt
added 2010/06/25 12:00 a.m.26 views

Joomla Component com_hbsuserregistration Upload Vulnerability

Exploit for php platform in category web applications ============================================================= Joomla Component comhbsuserregistration Upload Vulnerability =============================================================...

7.1AI score
SaveExploits0
Prion
Prion
added 2009/09/24 4:30 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Hotel Booking Reservation System aka HBS or comhbssearch component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php...

4.3CVSS6.2AI score0.0153EPSS
SaveExploits2References5
seebug.org
seebug.org
added 2009/09/14 12:00 a.m.48 views

Joomla Hotel Booking System XSS/SQL Injection Multiple Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/09/11 12:00 a.m.47 views

Joomla! Component Hotel Booking System - Cross-Site Scripting SQL Injection

Joomla! Component Hotel Booking System - Cross-Site Scripting SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel...

0.3AI score
SaveExploits0
zdt
zdt
added 2009/09/11 12:00 a.m.47 views

Joomla Hotel Booking System XSS/SQL Injection Multiple Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Joomla Hotel Booking System XSS/SQL Injection Multiple Vulnerabilities ======================================================================...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/09/11 12:00 a.m.41 views

Joomla! Component Hotel Booking System - Cross-Site Scripting / SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability...

7.5CVSS5.8AI score0.0153EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2009/09/11 12:00 a.m.62 views

Joomla Hotel Booking System XSS / SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability...

0.2AI score
SaveExploits0
CVE
CVE
added 2009/01/08 7:00 p.m.57 views

CVE-2008-5874

CVE-2008-5874 relates to multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (Joomla! HBS) via the id parameter in showhoteldetails for modules (1) com_allhotels and (2) com_5starhotels. The underlying issue is unsafely constructed SQL in these components, enabling remo...

7.5CVSS8.7AI score0.00975EPSS
SaveExploits4References4Affected Software3
CVE
CVE
added 2009/01/08 7:00 p.m.57 views

CVE-2008-5875

CVE-2008-5875 is an SQL injection vulnerability affecting the Hotel Booking Reservation System (HBS) for Joomla!, specifically the com_lowcosthotels component. The vulnerability is exploitable via the id parameter in the showhoteldetails action to index.php, allowing remote attackers to execute a...

7.5CVSS8.6AI score0.00975EPSS
SaveExploits4References4Affected Software2
Prion
Prion
added 2009/01/06 5:30 p.m.16 views

Sql injection

SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

7.5CVSS9AI score0.02007EPSS
SaveExploits5References4Affected Software2
Cvelist
Cvelist
added 2009/01/06 5:00 p.m.27 views

CVE-2008-5865

SQL injection vulnerability in the comhbssearch component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the rtype parameter in a showhoteldetails action to index.php...

8.2AI score0.01012EPSS
SaveExploits5References5
Packet Storm
Packet Storm
added 2008/12/30 12:00 a.m.34 views

Joomla HBS Search Component SQL Injection

Joomla Component comhbssearchrtype Blind SQL-injection Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Joomla HBS ! Administrator ! [email protected] ! http://joomlahbs.c...

SaveExploits0
Packet Storm
Packet Storm
added 2008/12/30 12:00 a.m.40 views

Joomla Top Hotel Module SQL Injection

Joomla Component comtophotelmoduleid Blind SQL-injection Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Top Hotel Module ! 06/07/2008 ! Joomla HBS ! [email protected] !...

0.2AI score
SaveExploits0
Rows per page
Query Builder